This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: 1L2/sTBVonOBZOOMUUNpQnlIDLVyi485akV1McduIi0= Subject key identifier: 35:F9:CF:D8:49:63:B9:75:10:CA:06:F7:B8:7E:8B:0A:20:42:64:98 Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 15478E4AB81087E5AAF56CB57FB6168D051A4C67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 0209 Signing time: Sun 01 Feb 2026 06:51:23 +0000 Manifest this update: Sun 01 Feb 2026 06:46:23 +0000 Manifest next update: Wed 04 Feb 2026 14:26:23 +0000 Files and hashes: 1: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 2: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) 3: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: BKNw1fS6+OmNgWlhigq97hkd8+Hgwaj7wiAz5vCdXms=) 4: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 14:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:47:8e:4a:b8:10:87:e5:aa:f5:6c:b5:7f:b6:16:8d:05:1a:4c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Feb 1 06:46:23 2026 GMT Not After : Feb 4 14:26:23 2026 GMT Subject: CN=35F9CFD84963B97510CA06F7B87E8B0A20426498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:b6:fb:e6:c0:de:bc:d3:56:ff:17:e5:ca: 5f:ec:d6:fc:ea:36:3a:5d:e7:de:7e:9f:4c:66:70: 4f:a1:a1:a0:8c:74:3f:0c:04:1a:cb:37:0e:49:d4: 30:7a:33:83:c2:f4:34:73:96:8b:30:fc:f1:ca:56: cc:65:a3:66:fa:35:05:50:a2:c6:fe:82:3b:25:16: 57:bb:20:16:92:85:52:6e:93:08:4c:b3:1f:da:25: 41:5c:a8:7e:1d:d6:bb:d8:2f:b2:1b:ff:96:19:53: a5:7f:88:f0:99:37:a0:5c:11:fe:26:ae:6f:5e:59: 7f:e3:aa:b6:68:77:06:70:56:e9:37:a7:67:a7:39: 05:4d:ba:eb:0b:90:8b:02:ee:22:09:59:7e:60:ff: a8:cf:b6:aa:b7:8a:0f:6d:54:42:fe:0d:d5:fb:0d: 71:f7:15:23:df:ac:d3:0a:65:6d:1e:4b:1f:6a:ae: 2b:d2:17:e9:90:32:6d:66:45:1e:ac:5f:0a:01:79: b2:e1:f3:f1:02:8e:bd:8b:2e:0b:0e:2e:97:ca:64: 44:18:6d:11:aa:4c:51:5e:df:84:87:06:01:17:f8: d5:c8:f6:d0:82:e3:09:cc:67:8d:47:23:7b:c5:64: 69:71:70:07:8e:af:41:20:37:d1:52:75:ea:35:4b: a3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F9:CF:D8:49:63:B9:75:10:CA:06:F7:B8:7E:8B:0A:20:42:64:98 X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4a:d5:a4:52:12:10:0e:eb:f8:49:b8:67:dc:a7:c5:ec:b3: 01:87:ae:99:68:01:cc:93:88:4f:0b:49:7a:29:9c:9f:24:e5: 17:11:25:ce:a5:1d:37:fc:73:fd:14:48:ad:8b:91:1a:fc:3a: f7:d9:65:4c:75:da:41:57:53:c5:31:04:e9:e9:42:5f:d6:fc: 9d:d1:bd:a0:e4:f9:1e:d7:fb:f9:de:35:63:cb:d6:a0:d7:b7: 78:f7:c0:85:60:03:e2:1d:9a:c8:10:a4:ac:de:ab:42:39:ed: 64:71:cb:9d:78:55:4d:8e:34:aa:9e:96:59:9f:9d:73:36:fa: a1:44:6a:98:ec:e8:f9:64:9f:18:32:74:27:ad:06:cc:56:6d: 8a:c4:10:f5:63:cd:87:fd:59:67:05:c1:90:4e:1c:83:ce:57: c7:2a:22:fb:38:00:75:63:61:8b:74:11:71:c5:fc:55:71:fd: 91:8f:03:3d:d6:76:12:46:d0:1a:83:fe:3f:2b:7e:66:2c:1a: 01:d1:70:86:6c:53:d8:21:3b:cf:6f:26:cb:d4:c5:9b:0c:0b: 11:3c:42:08:28:4c:65:bc:27:a4:0e:fc:56:4a:e5:4b:cf:fc: 10:e7:e8:ec:2b:2c:e1:00:ca:ec:fd:f9:fc:52:00:c2:0d:30: 3f:eb:a0:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUeOSrgQh+Wq9Wy1f7YWjQUaTGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNjAyMDEwNjQ2MjNaFw0yNjAyMDQxNDI2MjNaMDMxMTAvBgNV BAMTKDM1RjlDRkQ4NDk2M0I5NzUxMENBMDZGN0I4N0U4QjBBMjA0MjY0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCim7b75sDevNNW/xflyl/s1vzq Njpd595+n0xmcE+hoaCMdD8MBBrLNw5J1DB6M4PC9DRzlosw/PHKVsxlo2b6NQVQ osb+gjslFle7IBaShVJukwhMsx/aJUFcqH4d1rvYL7Ib/5YZU6V/iPCZN6BcEf4m rm9eWX/jqrZodwZwVuk3p2enOQVNuusLkIsC7iIJWX5g/6jPtqq3ig9tVEL+DdX7 DXH3FSPfrNMKZW0eSx9qrivSF+mQMm1mRR6sXwoBebLh8/ECjr2LLgsOLpfKZEQY bRGqTFFe34SHBgEX+NXI9tCC4wnMZ41HI3vFZGlxcAeOr0EgN9FSdeo1S6MlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNfnP2EljuXUQygb3uH6LCiBCZJgwHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpK1aRSEhAO6/hJuGfcp8XsswGHrploAcyT iE8LSXopnJ8k5RcRJc6lHTf8c/0USK2LkRr8OvfZZUx12kFXU8UxBOnpQl/W/J3R vaDk+R7X+/neNWPL1qDXt3j3wIVgA+IdmsgQpKzeq0I57WRxy514VU2ONKqellmf nXM2+qFEapjs6PlknxgydCetBsxWbYrEEPVjzYf9WWcFwZBOHIPOV8cqIvs4AHVj YYt0EXHF/FVx/ZGPAz3WdhJG0BqD/j8rfmYsGgHRcIZsU9ghO89vJsvUxZsMCxE8 QggoTGW8J6QO/FZK5UvP/BDn6OwrLOEAyuz9+fxSAMINMD/roDo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:01 2026 by rpki-client